Group policy filtering on both OU and Site?
Hi !
I'm a newbie to group policy handling and are just now struggeling trying to deploy printers this way.
I am running Windows 2008 as servers and XP, Vista and soon W7 as workstations. I have 3 different sites and in AD, computers divided into 3 child OU's - Server, Laptop and Workstations.
My problem is that I would like to deploy printers depending on both wich OU the computer belongs to and wich site the user are logged on at. For example: Computers that belong to Laptop and Workstation (but NOT Server) should have this policy applied and have a different set of printers applied depending on wich sites they are at.
I can't seem to set the OU-group as a criteria in either Security Filtering or Delegation? I have no trouble setting up the policy on either of my two premissions but to combine them...? Would it be possible to have the policy created on the Site and link it to the root OU for the 3 childs (My Workstations) and set some sort of "Do not apply" for the Server OU?
Software/Hardware used:
I'm a newbie to group policy handling and are just now struggeling trying to deploy printers this way.
I am running Windows 2008 as servers and XP, Vista and soon W7 as workstations. I have 3 different sites and in AD, computers divided into 3 child OU's - Server, Laptop and Workstations.
My problem is that I would like to deploy printers depending on both wich OU the computer belongs to and wich site the user are logged on at. For example: Computers that belong to Laptop and Workstation (but NOT Server) should have this policy applied and have a different set of printers applied depending on wich sites they are at.
I can't seem to set the OU-group as a criteria in either Security Filtering or Delegation? I have no trouble setting up the policy on either of my two premissions but to combine them...? Would it be possible to have the policy created on the Site and link it to the root OU for the 3 childs (My Workstations) and set some sort of "Do not apply" for the Server OU?
Software/Hardware used:
ASKED:
September 30, 2009 1:42 PM
UPDATED:
February 26, 2010 11:39 PM
RELATED QUESTIONS
- How to deploy printers using Windows Server 2008 Group Policy Preferences
- Creating printers using Windows Server 2008 group policy preferences
- Loopback Processing
- Folder Redirection and Offline Files GPO Questions
- How to properly mass delete user profiles in Windows 7 in a Server 2008 R2 environment
Answer Wiki:
You can apply a GPO to an OU or a site. The site GPO will be applied first and will be overriden by the OU GPO
You can block that application of the GPO to the servers OU using Block Inheritence setting but that will block all GPOs set at a higher level. If you need them to apply you need to use Override then to force the application. Might be better to apply the GPO to each of the Child OUs you want rather than to the root.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
